views/auth.go in Orange Forum 1.4.0 allows Open Redirection via the next parameter to /login or /signup.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-601,
Products Affected
